CVE-2000-0329 A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
MediumCVSS 5.1
EPSS 7.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 4.0 | No fix listed |
| Microsoft ie | = 4.0.1 | No fix listed |
| Microsoft ie | = 4.1 | No fix listed |
| Microsoft ie | = 5 | No fix listed |
| Microsoft ie | = 5.0 | No fix listed |
| Microsoft internet explorer | = 4.0 | No fix listed |
| Microsoft outlook | = 98 | No fix listed |
| Microsoft outlook | = 2000 | No fix listed |
| Microsoft outlook express | = 4.27.3110.1 | No fix listed |
| Microsoft outlook express | = 4.72.2106.4 | No fix listed |
| Microsoft outlook express | = 4.72.3120.0 | No fix listed |
| Microsoft outlook express | = 4.72.3612.1700 | No fix listed |
| Microsoft outlook express | = 5.0 | No fix listed |
References
- MS99-048 vendor-advisory